Critical Qt Declarative Vulnerability Causes Resource Exhaustion Risk

A vulnerability in Qt Declarative has been identified, allowing it to be exploited to consume excessive resources if it receives specially crafted input. This flaw affects multiple versions of Ubuntu, including 24.04 LTS, 22.04 LTS, and 20.04 LTS. The issue arises from improper validation of image tag attributes in the Text component of Qt Quick, potentially leading to denial of service. Users are advised to update their systems to the latest package versions to mitigate the risk. The vulnerability has been assigned the identifier USN-8357-1. Affected package versions include libqt5quick5 for Ubuntu 24.04 LTS and earlier versions for 22.04 LTS and 20.04 LTS. A standard system update is recommended to apply necessary changes. Ubuntu Pro users benefit from extended security coverage for these packages.

Key Points: • Qt Declarative vulnerability allows resource exhaustion via specially crafted input. • Affected Ubuntu versions include 24.04 LTS, 22.04 LTS, and 20.04 LTS. • Users should update to the latest package versions to prevent denial of service.